Is This Microsoft Warning Real? How to Tell, and What to Do Next
A warning or dialog box comes up and it will say your computer is infected. There will be a phone number, possibly a countdown timer, and even a voice repeating that you must call immediately.
It's important to take a breath and know that your computer is almost certainly fine.
What you're seeing is a web page designed to look like a Windows error. It is very common and it works by making you feel like there's no time to think. Don't stress.
Here's how to tell the difference, and how to close the window safely.
The one rule that settles it
Microsoft will never put a phone number in an error message.
That's the whole test. Real Windows warnings don't ask you to call anyone, because Microsoft has no interest in taking your call. If there is a number on the screen, the message is fake — no matter how official the rest of it looks.
The same goes for the phone. Microsoft does not call people at home about their computers. If someone calls you claiming to be from Microsoft, Windows support, or “the security department,” it is a scam, every time, no exceptions.
Four things fake warnings do that real ones never do
They take over the whole screen. A real Windows alert is a small box or a quiet notification near the clock in the bottom-right corner of the screen. Fake ones go full screen and can hide your taskbar so it feels inescapable.
They make noise. Beeping, alarms, or a recorded voice telling you not to shut down your computer. Windows never will do this.
They rush you. Countdown timers, “your files will be deleted in 5 minutes,” “do not restart your computer.” Real errors have no deadlines. Urgency is the whole trick.
They try to scare you. Your bank details being transmitted. Your IP address has been compromised. Someone is watching your webcam. This is just theater — designed to move you from thinking to reacting.
Real Windows security messages come from Windows Security. They're calm, small, and they include a button that will say something like “Actions” or “Review.” Never a phone number.
How to close it
Work down this list.
-
Press Alt + F4
Hold the Alt key and tap F4. This closes the browser window the fake warning is living in.
Don't click the X inside the warning. On many of these pages, the X is actually a picture of an X, and clicking it does something else entirely.
-
If that doesn't work, use Task Manager
Hold Ctrl + Shift + Esc together. A window called Task Manager will open.
On the Processes tab, find your web browser in the list — Chrome, Edge, Firefox, Brave, whatever you use. Right-click it and choose End task.
This should close the browser, along with the fake warning.
-
If this doesn't fix the stuck screen, just restart
Hold the power button on your computer for about 10 seconds until it shuts off. Wait a bit, then turn it back on.
The scam page tells you not to do this. That's exactly why it's safe.
-
Reopen your browser
When you open your browser again, it could ask whether you want to restore your pages or reopen your previous tabs.
Say no. Clicking yes brings the fake warnings right back.
If you already called the number
This is important, so read it even if you feel embarrassed. These scams are professionally built and they fool careful, capable people every single day. Being fooled says nothing about you.
If you only talked to them and hung up — you're most likely fine. Don't answer any return calls from them as they will call back.
If you let them remotely connect to your computer, they had access to everything on it while they were connected. That is a serious problem, and it needs immediate attention:
- Unplug the internet. Pull the network cable, or turn off Wi-Fi from the taskbar. This ends their connection immediately.
- Turn the computer off. Leave it off for now.
- From a different device — your phone, a tablet, a family member's computer — change the password on your email account first, then your bank, then keep changing passwords for any other account with sensitive information. Do not do this from the infected computer. For even more assuredness, do it from a computer or phone that did not share any network resources with the infected computer.
- Call your bank using the number on the back of your card. Tell them everything that occurred and ask them to watch the account.
- Get the computer checked before you use it again. Remote access programs are often left behind on purpose so they can come back later.
If you paid them, call your bank or card company right away and use the word fraud. Move quickly — timing affects what can be reversed.
If you were asked to purchase gift cards, that is a giveaway. No real company, and no government agency, will ever ask to be paid in gift cards. Not once. Ever. If you already sent the numbers, call the store that issued the card immediately. Sometimes the balance can still be frozen.
Why they ask such strange things
Knowing this pattern makes their next attempt easier to spot.
They ask for gift cards because gift cards can't be reversed and can't be traced.
They ask to connect to your computer because seeing your screen can let them fake evidence, and more importantly, gives them access to your files and sensitive information.
They want you to stay on the line while you drive to the store, because they know that any disconnection gives you time to tell someone, which ends the scam.
They can call you back weeks later claiming to offer a refund, because anyone who fell for it once is now on a list that gets sold to other scammers. This second call is another scam, not an apology.
Reporting it
Reporting won't get your money back, but it does help the cases that eventually shut down these operations.
- Federal Trade Commission — reportfraud.ftc.gov
- Arizona Attorney General, Consumer Protection — azag.gov/consumer
Still not sure?
If the warning won't close, if you're not certain whether anyone got in, or if your computer is acting strangely afterward — that's worth having looked at rather than worried about.
I'm local, I come to you, and the price is flat and quoted before I start. If someone remotely accessed your computer, I'll check for anything they left behind and make sure it is removed and any door is shut.
Mobile computer help in Scottsdale and the East Valley.